A convert

[Alan Karp]

https://www.linkedin.com/pulse/authorization-problem-we-keep-half-solving-george-fletcher-hueee/

For many years George Fletcher was one of the leading skeptics of the capabilities approach I was pushing at the Internet Identity Workshop.  He has now come around to understanding the importance of attenuated delegation.  He's almost got it down pat, but I think he's still bringing along some OAuth baggage.  (He doesn't see how to make it work across domains.)  That being said, he and I shared the burden of pushing others to think authorization instead of authentication at a recent conference.

--------------
Alan Karp